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What is claimed is: 

1 1 . A method for secure computer communications, comprising: 

2 generating a Rivest-Shamir-Adleman ("RSA") algorithm public / private 

3 key pair at a web server, wherein <N, e'>, represents the public key with N 

4 being the product of two distinct primes, p and q, and wherein the private key is 

5 represented by d; 

6 sending a client hello message to the web server from a client requesting 

7 a secure network connection; 

8 responding to the client with a server hello message comprising the RSA 

9 public key; 

10 encrypting a random string R at the client using the RSA public key, 

1 1 wherein the resulting cipher-text C includes R; 

12 sending the encrypted cipher-text to the web server; 

1 3 decrypting the cipher-text at the web server using the RSA private key 

14 wherein d=rimod(p-l) and d=r 2 mod(g-l), and wherein <n , r 2 > are relatively 

1 5 small numbers on the order of 160 bits in length, wherein R'i equals the cipher- 

1 6 text raised to the r j power moduli one of the distinct prime numbers and R' 2 

1 7 equals the cipher-text raised to the r 2 power moduli the remaining prime 

18 number; 

19 combining R'i and R' 2 to produce R using the Chinese Remainder 

20 Theorem wherein finding R'i and R' 2 is more efficient than using standard RSA 

21 keys; and 
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establishing a common session key between the web server and client 
using R. 



1 2. The method of claim 1, wherein the secure communications 

2 includes Secure Socket Layer ("SSL") messages. 

1 3. The method of claim 1, wherein the secure communications 

2 includes Transport Layer Security ("TLS") messages. 

1 4. The method of claim 1, wherein the secure communications 

2 includes internet protocol secure ("IPSec") messages. 

1 5 . The method of claim 1 , wherein generating a RS A public / 

2 private key pair includes; 

3 taking the product of the n-bit primes to produce an arbitrary number N; 

4 picking two random A>bit values r\ and ri such that n and ri are on the 

5 order of 160 bits and are mathematically related to the n-bit primes and e' is 

6 related to N; and 

7 sending the public key to a certificate authority and receiving back from 

8 the certificate authority a public key certificate for a public key wherein e' is on 

9 the order of N in size. 

1 6. The method of claim 5, wherein the k-b\X values are related to the 

2 n-bit primes by the equations gcd(ri, p-l) = l, gcd(>2, q-\) = I, and r\ = r 2 
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3 mod w, respectively, wherein gcd represents the greatest common divisor and w 

4 = gcd(p-l,g-l). 

1 7. The method of claim 6, wherein the relationship between e' and 

2 N is expressed by the equation e' = cT 1 mod cp(N). 

1 8. The method of claim 1 , wherein decrypting includes: 

2 computing Rj ' and R 2 ' as expressed by the relationship j? x = C ri mod p 

3 and R 2 = C' 2 modq ; and 

4 applying the Chinese Remainder Theorem to produce R, wherein 

5 R = R[ mod p and R = R z mo&q 

1 9. A method for performing an initial handshake during secure 

2 communications in a computer network comprising: 

3 coupling a client to a web server; 

4 generating a Rivest- Shamir- Adleman ("RSA") algorithm public / private 

5 key pair at the web server, wherein the RSA public key is a product of two 

6 distinct prime numbers and the private key is a function of two random 

7 numbers, wherein each random number has a number of bits greater than or 

8 equal to 1 60 bits and less than a number of bits of the RSA key; 

9 sending a client hello message to the web server requesting a secure 

10 network connection; 

1 1 responding to the client with a server hello message containing the RSA 
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12 public key; 

13 encrypting a random string R at the client using the RSA public key, 

14 wherein the resulting cipher-text C includes R; 

15 sending the encrypted cipher-text message to the web server; 

1 6 separating cipher-text moduli of the two distinct prime numbers; 

17 decrypting the moduli of the two distinct prime numbers individually 

1 8 using the two random numbers, wherein the results are combined using the 

19 Chinese Remainder Theorem, wherein computational efficiency is improved; 

20 and 

21 establishing a common session key between the web server and the 

22 client using R. 

1 10. The method of claim 9, wherein the initial handshake of secure 

2 communications includes Secure Socket Layer ("SSL") messages. 

1 11. The method of claim 9, wherein the initial handshake of secure 

2 communications includes Transport Layer Security ("TLS") messages. 

1 12. The method of claim 9, wherein the initial handshake of secure 

2 communications includes internet protocol secure ("IPSec") messages. 

1 13. The method of claim 9, further comprising: 

2 combining individually encrypted messages into a set of encrypted 

3 messages wherein each encrypted message possesses a public key comprising 
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4 an encryption exponent; 

5 determining a root node of a binary tree containing leaf nodes 

6 corresponding to each encryption exponent using a plurality of separate parallel 

7 batch trees, wherein the root node of each tree is found and combined to 

8 determine the final answer; 

9 minimizing a disparity between sizes of the encryption exponents of the 

10 within the set; 

1 1 using simultaneous multiple exponentiation such that the encryption 

1 2 exponents are combined to reduce the number of exponentiations; 

1 3 calculating a product of the encrypted messages; 

14 extracting at least one root from the product of the encrypted messages; 

15 and 

16 decrypting the encrypted messages by expressing the at least one root as 

17 at least one promise and evaluating the at least one promise at the leaf nodes, 

18 and multiplying an inversion of a total product of the leaf nodes with a partial 

19 product of the leaf nodes forming an inversion of the leaf node, producing a 

20 reduced number of modular inversions wherein efficiency of the decryption is 

21 increased. 

1 1 4. The method of claim 9, further comprising keeping the size of N 

2 constant while reducing the size of the two distinct prime numbers such that the 

3 size of the two distinct prime numbers is on the order of one third of the size of 

4 N. 
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1 15. A method for secure communications, comprising: 

2 generating a Rivest-Shamir-Adleman ("RSA") algorithm public / private 

3 key pair at a web server, wherein the RSA public key is a product of two 

4 distinct prime numbers and the private key is a function of two random 

5 numbers; 

6 receiving a client hello message from a client requesting a secure socket 

7 layer ("SSL") coupling; 

8 responding to the client with a server hello message containing the RSA 

9 public key; 

I o encrypting a random string R at the client using the RSA public key, 

I I wherein the resulting cipher-text includes R; 

1 2 receiving the encrypted cipher-text message at the web server; 

13 separating cipher-text moduli of the two distinct prime numbers; 

1 4 decrypting the moduli of the distinct prime numbers individually using 

1 5 the two random numbers, wherein the results are combined using the Chinese 

16 Remainder Theorem; and 

17 establishing a common session key between the web server and client 

18 using R. 

1 16. A method for secure computer communications, comprising: 

2 coupling a web server to a client wherein the client requests the 

3 formation of a secure network connection; 

4 generating a Rivest-Shamir-Adleman("RSA") algorithm public / private 

5 key pair, the public key comprising a root N, wherein N of the RSA public key 
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6 is the product of two distinct n-bit prime numbers, p and q, wherein an 

7 encryption exponent e' of the RSA public key is of the same order in size as the 

8 public key root, N 

9 encrypting a plain-text message R using the RSA public key such that 

10 the resulting text is cipher-text C; 

1 1 decrypting the cipher-text C using the RSA private key wherein the RSA 

12 private key is a function of two roots rj and r 2 , wherein the two roots each are 

13 on the order of 160 bits in length; and 

14 using the plain-text message R to determine a session encryption key 

1 5 and a session integrity key. 

1 1 7 . A method for Rivest-Shamir-Adleman ("RSA") decryption of 

2 secure network communications, comprising: 

3 generating a RSA public/private key pair at a web server, wherein <N, 

4 e> represents the public key that is mathematically related to two distinct prime 

5 numbers; 

6 keeping a size of N constant while reducing a size of the two distinct 

7 prime numbers by calculating N from a product of a first distinct prime number 

8 raised to the first power and a second distinct prime number wherein the first 

9 power is greater than one; 

1 0 using the public key by a client to encrypt a plain-text message R to 

1 1 form a cipher-text message C; 

1 2 decrypting the cipher-text C at the web server by using the RSA private 

1 3 key d to determine the plain-text message R by finding R'i and R' 2 , wherein the 
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14 private key is a function of two random numbers <r } , r 2 >, and wherein an 

1 5 additional R" i is constructed by using one of the two distinct prime numbers 

1 6 raised to a power greater than one, wherein efficiency of the decryption is 

17 increased in response to the reduced size of the two distinct prime numbers; and 

1 8 computing the plain-text message using the Chinese Remainder 

19 Theorem. 

1 18. The method of claim 1 7, further comprising; 

2 combining individually encrypted network security protection 

3 handshake messages into a set of encrypted messages wherein each encrypted 

4 message is derived using a public key containing an encryption exponent; 

5 determining a root node of a binary tree comprising leaf nodes 

6 corresponding to each encrypted messages encryption exponent by using a 

7 plurality of separate, parallel batch trees finding the root node of each tree and 

8 combining the final answers; 

9 minimizing the disparity between the sizes of the encryption exponents 

10 of the public keys within the set; 

1 1 using simultaneous multiple exponentiation such that the encryption 

12 exponents are combined to reduce the number of exponentiations; 

1 3 calculating a product of the encrypted messages; 

14 extracting at least one root from the product of the encrypted messages; 

15 and 

1 6 decrypting the encrypted messages by expressing the at least one root as 

17 at least one promise and evaluating the at least one promise at the leaf nodes, 
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1 8 and multiplying an inversion of a total product of the leaf nodes with a partial 

1 9 product of the leaf nodes forming an inversion of the leaf node wherein the 

20 decryption is increased by reducing the number of modular inversions . 

1 19. The method of claim 1 7 , wherein the k-bit values n, r 2 are 

2 related to the n-bit primes by the greatest common divisor of (n, p - 1) = 1 , in, 

3 q - 1) = 1, n = r 2 mod w respectively such that d = n, mod p-l,d = r 2 mod q - 

4 1, and w is equal to the greatest common divisor of (p-l, q-l). 

1 20. The method of claim 17, wherein decrypting includes: 

2 computing R } ' , R"i, andi? 2 'as expressed by the relationships 

3 J?; = C l mod p , R 2 = C 2 modq , and = R[ ~^ (modp 2 )- 

e{Rj 

1 2 1 . A method for generating a Rivest-Shamir-Adleman ("RS A") 

2 public / private key pair in secure network couplings, comprising: 

3 generating two n-bit distinct prime numbers; 

4 computing a public key root from a mathematical relationship between 

5 two distinct prime numbers; 

6 reducing the size of the two distinct prime numbers while keeping the 

7 size of the public key root constant using exponentiation of the two distinct 

8 prime numbers; 

9 forming a public RSA key pair by associating the public key root and a 
10 standard RSA encryption exponent; and 

-44- 

C:\NrPorrtil\PALIBl\MCM\1322410_5.DOC (62299) 



1 1 computing a private RSA key pair by mathematically combining the 

1 2 standard RSA encryption exponent and the n-bit distinct prime numbers. 

1 22 . The method of claim 2 1 , wherein computing the public key root 

2 includes the product of the square of one n-bit prime number and the second n- 

3 bit prime number. 

1 23 . The method of claim 2 1 , wherein the public RSA key pair is 

2 indistinguishable from a standard RSA pair. 

1 24. The method of claim 2 1 , further comprising: 

2 encrypting a pre-master-secret using the public RSA key pair; and 

3 decrypting the pre-master-secret using the private RSA key pair wherein 

4 Hensle lifting compensates for reducing the size of the distinct prime numbers. 

1 25 . A method for Rivest-Shamir-Adleman ("RSA") decryption of 

2 secure network communications, comprising: 

3 generating a RSA public/private key pair at a web server, wherein <N, 

4 e> represents a public key that is mathematically related to two distinct prime 

5 numbers and d represents a private key that is mathematically related to two 

6 random numbers; 

7 keeping a size of N constant while reducing a size of the two distinct 

8 prime number by calculating N from a product of a first distinct prime number 

9 raised to a power greater than one and the second distinct prime number; 

1 o using the public key at a client to encrypt a plain-text message R to form 
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11 a cipher-text message C; 

12 decrypting the cipher-text C at the web server using the RSA private key 

13 d to determine the plain-text message R by finding R\ and R' 2 , wherein an 

14 additional R"i is constructed by raising the first of the two distinct prime 

1 5 numbers to a power greater than one, wherein the efficiency of the decryption is 

16 increased due to a reduced size of the two distinct prime numbers using the 

17 private RSA key pair, wherein Hensle lifting compensates for altering a 

18 multiplicity of the distinct prime numbers; and 

1 9 computing the plain-text message using the Chinese Remainder 

20 Theorem. 

1 26. A method for Rivest-Shamir-Adleman ("RSA") decryption of 

2 secure network communications, comprising: 

3 generating a RSA public/private key pair at the web server wherein <N, 

4 e> represents the public key that is mathematically related to two distinct prime 

5 numbers; 

6 keeping a size of N constant while reducing a size of the two distinct 

7 prime numbers such that each of the two distinct prime numbers is on the order 

8 of one third of the size of N; 

9 using the public key at a client to encrypt a plain-text message R to form 

10 a cipher-text message C; 

1 1 decrypting the cipher-text C at the web server by using the RSA private 

12 key d, to determine the plain-text message R by rinding R'i and R2, wherein an 

1 3 additional R" 1 is constructed by using the one of the two distinct prime numbers 

C:\NrPortbl\PALIBl\MCM\1322410_5.DOC (62299) _46_ 



14 raised to a power greater than one, wherein the efficiency of the decryption is 

1 5 increased in response to the reduced size of the two distinct prime numbers 

16 using the private RSA key pair wherein Hensle lifting compensates for altering 

17 the multiplicity of the distinct prime numbers; and 

1 8 computing the plain-text message using the Chinese Remainder 

19 Theorem. 

1 27. A system for Rivest-Shamir-Adleman ("RSA") decryption of 

2 secure network communications, comprising: 

3 a web server generating a RSA public/private key pair wherein <N, e> 

4 represents a public key that is mathematically related to two distinct prime 

5 numbers; 

6 the web server keeping a size of N constant while reducing a size of the 

7 two distinct prime numbers by calculating N from the product of a first distinct 

8 prime number raised to a power greater than one and a second distinct prime 

9 number; 

10 a client using the public key to encrypt a plain-text message R to form a 

1 1 cipher-text message C; 

12 the web server decrypting the cipher-text C by using the RSA private 

1 3 key d to determine the plain-text message R by finding R'i and R2, wherein an 

14 additional R"i is constructed by using one of the two distinct prime numbers 

1 5 raised to a power greater than one wherein the efficiency of the decryption is 

1 6 increased in response to the reduced size of the two distinct prime numbers; and 
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the web server computing the plain-text message using the Chinese 
Remainder Theorem. 



1 28. A system for using Rivest-Shamir-Adleman ("RSA") decryption 

2 of secure network communications in a computer network, comprising: 

3 at least one web server; 

4 at least one client processor coupled to the at least one web server, 

5 wherein the at least one web server generates a RSA public/private key pair, 

6 <N, e>, representing the public key that is mathematically related to two distinct 

7 prime numbers, wherein d represents the private key; 

8 the at least one web server keeping a size of N constant while reducing a 

9 size of the two distinct prime numbers by calculating N from the product of a 

10 first distinct prime number raised to a power greater than one and a second 

1 1 distinct prime number; 

12 the at least one client processor using the public key to encrypt a plain- 

13 text message R to form a cipher-text message C; 

14 the at least one web server decrypting the cipher-text message C by 

1 5 using the RSA private key <rj , r 2 > to determine the plain-text message R by 

16 finding R'i and R'2, wherein an additional R"i is constructed by using one of the 

17 two distinct prime numbers raised to a power greater than one wherein the 

18 efficiency of the decryption is increased in response to the reduced size of the 

19 two distinct prime numbers; and 

20 the at least one web server computing the plain-text message using the 

21 Chinese Remainder Theorem. 
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1 29. A computer-readable medium, comprising executable 

2 instructions for Rivest-Shamir-Adleman ("RSA") decryption of secure network 

3 communications which, when executed in a processing system, causes the 

4 system to: 

5 couple a web server to a client; 

6 send a client hello message to the web server requesting a secure 

7 network connection; 

8 generate a Rivest-Shamir-Adleman ("RSA") algorithm public / private 

9 key pair at the web server wherein the RSA public key is the product of two 

1 0 distinct prime numbers wherein the RSA private key is a function of two 

1 1 random numbers wherein each random number has a number of bits greater 

12 than or equal to 160 bits and less than a number of bits of the RSA key; 

1 3 respond to the client with a server hello message containing the RSA 

14 public key; 

1 5 encrypt a random string R at the client using the RSA public key, 

1 6 wherein the resulting cipher-text C includes R; 

17 send the encrypted cipher-text message C to the web server; 

18 separate cipher-text C moduli of the two distinct prime numbers; 

1 9 decrypt the moduli of the two distinct prime numbers individually using 

20 the two random numbers, wherein results are combined using the Chinese 

21 Remainder Theorem, wherein computational efficiency is improved and 

22 establish a common session key between the web server and the client 

23 using R. 
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30. An electromagnetic medium, comprising executable instructions 
for Ri vest- Shamir- Adleman ("RSA") decryption of secure network 
communications which, when executed in a processing system, causes the 
system to: 

couple a web server to a client; 

send a client hello message to the web server requesting a secure 
network connection; 

generate a Rivest-Shamir- Adleman ("RSA") algorithm public / private 
key pair at the web server wherein the RSA public key is the product of two 
distinct prime numbers, wherein the RSA private key is a function of two 
random numbers wherein each random number has a number of bits greater 
than or equal to 160 bits and less than a number of bits of the RSA key; 

respond to the client with a server hello message containing the RSA 
public key; 

encrypt a random string R at the client using the RSA public key, 
wherein the resulting cipher-text C includes R; 

send the encrypted cipher-text message C to the web server; 

separate cipher-text moduli of the two distinct prime numbers; 

decrypt the moduli of the two distinct prime numbers individually using 
the two random numbers, wherein results are combined using the Chinese 
Remainder Theorem, wherein computational efficiency is improved; and 

establish a common session key between the web server and the client 
using R. 
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1 31 . A computer-readable medium, comprising executable 

2 instructions for Rivest-Shamir- Adleman ("RS A") decryption of secure network 

3 communications which, when executed in a processing system, causes the 

4 system to: 

5 generate a RSA public/private key pair at the web server wherein <N, e> 

6 represents the public key that is mathematically related to two distinct prime 

7 numbers; 

8 keep a size of N constant while reducing a size of the two distinct prime 

9 numbers such that each of the two distinct prime numbers is on the order of one 

10 third of the size of N; 

1 1 use the public key at client to encrypt a plain-text message R to form a 

12 cipher-text message C; 

1 3 decrypt the cipher-text C at the web server by using the RSA private key 

14 d to determine the plain-text message R by finding R\ and R' 2 , wherein an 

15 additional R"i is constructed by using one of the two distinct prime numbers 

1 6 raised to a power greater than one, wherein the efficiency of the decryption is 

1 7 increased in response to the reduced size of the two distinct prime numbers 

1 8 using the private RSA key pair wherein Hensle lifting compensates for altering 

1 9 the multiplicity of the distinct prime numbers; and 

20 compute the plain-text message using the Chinese Remainder Theorem. 

1 32. An electromagnetic medium, comprising executable instructions 

2 for Rivest-Shamir- Adleman ("RSA") decryption of secure network 
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3 communications which, when executed in a processing system, causes the 

4 system to: 

5 generate a RSA public/private key pair at the web server wherein <N, e> 

6 represents the public key that is mathematically related to two distinct prime 

7 numbers; 

8 keep a size of N constant while reducing a size of the two distinct prime 

9 numbers such that each of the two distinct prime numbers is on the order of one 

10 third of the size of N; 

1 1 use the public key at a client to encrypt a plain-text message R to form a 

12 cipher-text message C; 

13 decrypt the cipher-text C at the web server by using the RSA private key 

14 d to determine the plain-text message R by finding R'i and R' 2 , wherein an 

1 5 additional R" i is constructed by using one of the two distinct prime numbers 

16 raised to a power greater than one, wherein the efficiency of the decryption is 

17 increased in response to the reduced size of the two distinct prime numbers 

1 8 using the private RSA key pair wherein Hensle lifting compensates for altering 

19 the multiplicity of the distinct prime numbers; and 

20 compute the plain-text message using the Chinese Remainder Theorem. 
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